add CBL_KRB_USER to environment